Samsung iES4024GP, Management Manual

Page: 135 / 712

User Authentication
3-79
3
• Private Password
– Password stored in the private key file. This password is used
to verify authorization for certificate use, and is verified when downloading the
certificate to the switch.
Web – Click Security, HTTPS Settings. Fill in the TFTP server, certificate and private
file name details, then click Copy Certificate.
Figure 3-47 HTTPS Settings
CLI – This example copies the certificate file from the designated TFTP server.
Note: The switch must be reset for the new certificate to be activated. To reset the
switch, See “Resetting the System” on page 3-34 or type:
Console#reload
Configuring the Secure Shell
The Berkeley-standard includes remote access tools originally designed for Unix
systems. Some of these tools have also been implemented for Microsoft Windows
and other environments. These tools, including commands such as
rlogin (remote
login), rsh (remote shell), and rcp (remote copy), are not secure from hostile attacks.
The Secure Shell (SSH) includes server/client applications intended as a secure
replacement for the older Berkeley remote access tools. SSH can also provide
remote management access to this switch as a secure replacement for Telnet.
When the client contacts the switch via the SSH protocol, the switch generates a
public-key that the client uses along with a local user name and password for access
authentication. SSH also encrypts all data transfers passing between the switch and
SSH-enabled management station clients, and ensures that data traveling over the
network arrives unaltered.
Console#copy tftp https-certificate 4-35
TFTP server ip address: < server ip-address >
Source certificate file name: < certificate file name >
Source private file name: < private key file name >
Private password: < password for private key >